User authorization verification apparatus for computer systems including a central device and a plurality of pocket sized remote units

• US 4,601,011 A
• Filed: 03/18/1985
• Issued: 07/15/1986
• Est. Priority Date: 12/30/1981
• Status: Expired due to Term

• Current Assignee: Avigdor Grynberg
• Original Assignee: Avigdor Grynberg
• Inventors: Grynberg, Avigdor
• Primary Examiner(s): Heckler, Thomas M.
• Application Number:
  US06/712,903
• Time in Patent Office: 484 Days
• Field of Search: 178/22.01, 178/22.08, 178/22.09, 178/22.14, 235/379, 235/380, 235/382, 325/55, 340/825.34, 340/825.44, 340/825.49, 340/825.54, 340/825.55, 364/200, 364/406, 364/900, 455/31, 455/26
• US Class Current: 713/184
• CPC Class Codes: G06F 3/0227 Cooperation and interconnection of the input arrangement with other functional units of a computer G06F3/023 - G06F3/037 take precedence
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00

Abstract

A remote user authorization verification system including a central device having data imput and output, memory and data comparison facilities, and a plurality of hand held, pocket size remote units arranged for data communication with the central device by means of conventional telecommunications devices, such as a telephone, the pocket size remote units having information input keying apparatus, memory apparatus and enciphering apparatus and being operative for providing an enciphered verification code to the central device for verification of the authorized status of the user.

Claims

1. A remote authorization verification system comprising:

a central device including;

data input and output facilities for communicating user authorization verification data with a plurality of hand held, pocket size remote units and providing an output indication of user authorization status,

a memory for storing predetermined user authorization verification data for comparison purposes including coding keys, each of which is synchronized with the coding key of each of said remote units and

data comparison facilities for comparing user authorization verification data received from said plurality of hand held, pocket size remote units with user authorization verification data stored in said memory for determining whether authorization exists; and

a plurality of hand held, pocket size remote units providing data communication with said central device via conventional telecommunications devices, said pocket size remote units each including;

information input keying means, for receiving a user memorized password code,

verification means for confirming receipt of a correct user memorized password code assigned to each individual remote unit and means for providing an enabling output in response to receipt of said correct password code by said verification means, a memory for storing a coding key, and

enciphering means operative when enabled by said enabling output, and in accordance with said coding key for providing an enciphered verification code for transmission to said central device for indicating the authorized status of a user,

each of said remote units being operative to produce an enciphered verification code by employing the coding key stored in its memory in response to the password code inputted through its information input keying means, said verification code being different for each entry of said correct password code.

2. A system according to claim 1 and wherein said enciphering means employs a key having at least first and second parts, said first part being selectably determined and being retained in said memory means and said second part being changed each time the key is used for encryption.

3. A system according to claim 2 and wherein said enciphering means also comprises sequence generating means for generating said second part of said key.

4. A system according to claim 3 and wherein said central unit comprises sequence verification means for ascertaining the genuineness of said second part.

5. A system according to claim 1 wherein each of said plurality of remote units comprises a housing and means for disabling operation of said remote unit in response to attempted tampering therewith.

6. A system according to claim 1 and also comprising means for providing an alarm communication to said central device in response to tampering with or unauthorized use of said at least one remote terminals, unauthorized use being inputting of an incorrect password code at least a predetermined number of times.

7. A system according to claim 1 and wherein said remote units comprise means for transmitting an alarm communication to said central device in response to attempted unauthorized use of said at least one remote terminal, unauthorized use being inputting of an incorrect password code at least a predetermined number of times.

8. Apparatus according to claim 1 and wherein said central device includes voice generation means for providing information to the user via said telecommunications device in voice form.

9. A remote authorization verification system comprising:

a plurality of central devices each including;

data input and output facilities for communicating user authorization verification data with a plurality of hand held, pocket size remote units and providing an output indication of user authorization status,

a memory for storing predetermined user authorization verification data for comparison purposes including coding keys, each of which is synchronized with a coding key assigned to each of said remote units and which corresponds to a given one of said plurality of central devices; and

data comparison facilities for comparing user authorization vertification data received from said plurality of hand held, pocket size remote units with user authorization vertification data stored in said memory for determining whether authorization exists; and

a plurality of hand held, pocket size remote units providing data communication with said plurality of central devices via conventional telecommunications devices, said pocket size remote units each including;

information input keying means, for receiving a user memorized password code and central device identification data,

verification means for confirming receipt of a correct user memorized password code assigned to each individual remote unit;

means for providing an enabling output in response to receipt of said correct password code by said verification means, and

a memory for storing a plurality of coding keys and enciphering means operative when enabled by said enabling output, and in accordance with a coding key determined by said central device identification data for providing a non-repeating enciphered verification code for transmission to the central device identified by said central device identification data for indicating the authorized status of a user, said enciphering means including means for generating verification codes which are different for each entry of said correct password code.

10. A system according to claim 9 and wherein said enciphering means employs a key having at least first and second parts, said first part being selectably determined and being retained in said memory means and said second part being changed each time the key is used for encryption.

11. A system according to claim 10 and wherein said encyphering means also comprises sequence generating means for generating said second part of said key.

12. A system according to claim 11 and wherein said central device comprises sequence verification means for ascertaining the genuineness of said second part.

13. A system according to claim 9 and wherein said remote units each comprise:

transducer means for acoustic coupling with a telephone handset; and

modem means.

14. A system according to claim 9 and wherein said enciphering means is operative such that said enciphered verification code cannot be used to determine said password code, whereby said memorized password code is not available or made available in any form beyond said remote unit.

15. A system according to claim 9 and wherein each of said plurality of remote units comprises a housing and means for disabling operation of said remote unit in response to attempted tampering therewith.

16. A system according to claim 9 and also comprising means for providing an alarm communication to said plurality of central devices in response to attempted tampering with or unauthorized use of said at least one remote terminals, unauthorized use being inputting of an incorrect password code at least a predetermined number of times.

17. A system according to claim 9 and wherein said remote units comprise means for transmitting an alarm communication to said central devices in response to attempted unauthorized use of said at least one remote terminal, unauthorized use being inputting of an incorrect password code at least a predetermined number of times.